CVE-2016-4079

epan/dissectors/packet-pktc.c in the PKTC dissector in Wireshark 1.12.x before 1.12.11 and 2.0.x before 2.0.3 does not verify BER identifiers, which allows remote attackers to cause a denial of service (out-of-bounds write and application crash) via a crafted packet.

• CWE-119

• http://www.debian.org/security/2016/dsa-3585Third Party Advisory
• http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.htmlThird Party Advisory
• http://www.securitytracker.com/id/1035685
• http://www.wireshark.org/security/wnpa-sec-2016-22.htmlVendor Advisory
• https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12206Issue Tracking
• https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=4cdc9eeba58f866bd5f273e9c5b3876857a7a4bf
• http://www.debian.org/security/2016/dsa-3585Third Party Advisory
• http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.htmlThird Party Advisory
• http://www.securitytracker.com/id/1035685
• http://www.wireshark.org/security/wnpa-sec-2016-22.htmlVendor Advisory
• https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12206Issue Tracking
• https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=4cdc9eeba58f866bd5f273e9c5b3876857a7a4bf

Published

Apr 25, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-4073Multiple integer overflows in the mbfl_strcut function in ex…
• CVE-2016-4074The jv_dump_term function in jq 1.5 allows remote attackers …7.5
• CVE-2016-4075Opera Mini 13 and Opera Stable 36 allow remote attackers to …6.1
• CVE-2016-4076epan/dissectors/packet-ncp2222.inc in the NCP dissector in W…
• CVE-2016-4077epan/reassemble.c in TShark in Wireshark 2.0.x before 2.0.3 …
• CVE-2016-4078The IEEE 802.11 dissector in Wireshark 1.12.x before 1.12.11…
• CVE-2016-4080epan/dissectors/packet-pktc.c in the PKTC dissector in Wires…
• CVE-2016-4081epan/dissectors/packet-iax2.c in the IAX2 dissector in Wires…
• CVE-2016-4082epan/dissectors/packet-gsm_cbch.c in the GSM CBCH dissector …
• CVE-2016-4083epan/dissectors/packet-mswsp.c in the MS-WSP dissector in Wi…
• CVE-2016-4084Integer signedness error in epan/dissectors/packet-mswsp.c i…
• CVE-2016-4085Stack-based buffer overflow in epan/dissectors/packet-ncp222…